Hello,
Almost ready to sitch my squid 2.5S9 in production, but some few more test
and I find a strange problem.
Sometime I have my IE prompting for a username/password, since the NLTM is
(look like) working i try to find out why I'm getting this request.
I try to look int the cache, my access.log, nothing there.
any clue why ? Where to loko ?
here is my config:
# Authentication scheme
## NTLM auth
auth_param ntlm program /opt/samba/bin/ntlm_auth
--helper-protocol=squid-2.5-ntl
mssp
auth_param ntlm children 64
auth_param ntlm max_challenge_lifetime 30 minutes
auth_param ntlm max_challenge_reuses 0
## basic auth
auth_param basic program /opt/samba/bin/ntlm_auth
--helper-protocol=squid-2.5-ba
sic
auth_param basic children 64
auth_param basic credentialsttl 2 hours
auth_param basic realm CAI Internet access control Genève
#authenticate_cache_garbage_interval 10 minute
#authenticate_ttl 10 minute
external_acl_type NT_global_group concurrency=64 %LOGIN
/opt/squid/libexec/wbinfo_group.pl
acl techuser external NT_global_group D-CH\SurfeursWebCCH-T
acl webuser external NT_global_group D-CH\SurfeursWebCCH
D-CH\SurfeursWebCCH-T D-CH\SurfeursWebBCH D-CH\SurfeursWebHCH
acl cai-auth proxy_auth REQUIRED
# cache directory info
cache_dir diskd /cache1 25000 64 256
cache_replacement_policy LFUDA
maximum_object_size 20 MB
cache_swap_high 80
cache_swap_low 70
redirect_children 20
coredump_dir /usr/local/squid/var
forwarded_for off
hierarchy_stoplist cgi-bin ?
http_access deny ftp !techuser
http_access allow cai-auth webuser
http_access deny all
Arno Streuli
******************************************************************
DISCLAIMER - E-MAIL
-------------------
The information contained in this E-Mail is intended for the named
recipient(s). It may contain certain privileged and confidential
information, or information which is otherwise protected from
disclosure. If you are not the intended recipient, you must not
copy,distribute or take any action in reliance on this information
******************************************************************
Received on Thu Jun 30 2005 - 05:57:27 MDT
This archive was generated by hypermail pre-2.1.9 : Fri Jul 01 2005 - 12:00:03 MDT